This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json) Hash identifier: nWAwefrdgsaRTi8IEVyTDPL9r4hPRuZ1jB0Kp9Gv9Xc= Subject key identifier: B2:7D:72:23:41:D9:BA:83:F7:34:13:EA:AA:33:3E:24:4C:25:75:A4 Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82 Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782 Certificate serial: 019B3AC6AA6A349D118AEFFF2AC7074BC23B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft Manifest number: 0E5E Signing time: Sat 20 Dec 2025 08:00:56 +0000 Manifest this update: Sat 20 Dec 2025 08:00:56 +0000 Manifest next update: Sun 21 Dec 2025 08:00:56 +0000 Files and hashes: 1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=) 2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: dHFzdcQP8gSd/0guIdcz0C+900kG/marZ4TCQES7EwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:aa:6a:34:9d:11:8a:ef:ff:2a:c7:07:4b:c2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782 Validity Not Before: Dec 20 08:00:56 2025 GMT Not After : Dec 21 08:00:56 2025 GMT Subject: CN=b27d722341d9ba83f73413eaaa333e244c2575a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:4d:b3:a8:3a:1d:46:0b:75:76:7b:47:b5: 0e:22:06:be:ee:58:fa:25:f3:76:48:c2:b3:aa:2b: 21:8e:6c:cd:8a:2a:5e:1e:75:b4:b5:8e:0d:c2:35: 1d:5b:51:13:30:02:e4:e6:7a:6b:ce:f7:4d:3d:68: 28:a9:58:cb:45:18:21:86:f7:04:0d:a0:27:30:d1: 59:e9:19:36:c6:ab:a4:7a:3a:84:73:dc:87:54:ab: 44:ff:a1:88:51:16:80:89:86:d6:d0:75:d4:6d:0d: 24:79:d2:ee:ad:3d:d2:16:57:aa:87:20:95:f4:f6: d4:d1:bd:bd:a3:0d:00:15:8e:07:5d:99:86:e4:74: 2b:85:05:04:4f:d6:c3:8c:77:80:f3:75:dd:5a:1a: a9:ae:4b:30:65:1c:7c:a8:9f:ff:7e:89:60:cd:64: b5:c7:33:ba:db:bd:ef:fe:8a:9c:8e:23:a6:15:7f: 13:dc:b4:87:a4:e9:09:85:c6:73:67:1b:66:10:5d: e5:39:a0:ef:16:31:d6:58:7d:e1:61:e9:27:37:a0: 9c:88:6c:5b:ae:fa:dd:da:35:47:e0:d3:77:1b:61: 6b:0d:88:a7:c8:b6:44:0c:bd:13:64:b8:34:05:60: 38:da:79:3c:76:fd:b2:8e:ee:f9:5d:ad:d3:96:06: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7D:72:23:41:D9:BA:83:F7:34:13:EA:AA:33:3E:24:4C:25:75:A4 X509v3 Authority Key Identifier: keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3c:a2:bb:7d:97:95:3c:b4:b3:15:3b:84:49:98:b4:c9:4d: d6:b3:60:87:1c:cc:62:26:87:11:78:dc:49:31:ae:f8:77:e2: 14:ce:c6:f0:78:42:ea:a2:2b:ec:5b:38:ff:29:ff:cf:b6:1e: f9:37:a6:f1:87:17:8c:6d:f5:76:0e:05:54:8e:fd:03:2c:91: ee:07:93:f4:4e:8a:d3:31:b6:cf:d6:72:c7:69:d2:f0:c3:49: 7c:4d:d8:0a:8f:65:54:74:49:90:71:36:87:04:62:f3:22:85: 79:07:9c:10:58:db:1e:f9:3f:a5:fb:9f:e3:df:0d:ea:12:a9: ea:5c:3f:cf:43:00:e1:48:7f:b9:f0:32:91:c5:6d:3a:b8:31: 35:b7:44:82:3d:8d:c3:1c:72:f7:08:b5:db:af:24:8d:78:f2: 47:25:93:2d:61:70:c2:78:25:6b:22:d9:ea:ef:13:cd:ea:b6: 66:3b:d1:5b:01:a5:2a:cc:71:fb:9e:77:67:34:2c:f4:db:a4: 2e:51:4b:b3:6b:66:83:fc:fa:53:fe:bf:69:31:b5:59:e9:33: fc:0e:40:ab:08:34:3c:45:93:8c:0d:13:4a:5a:84:58:42:57: e6:36:ee:67:3b:cd:a3:ca:7e:35:ef:f8:11:ab:60:94:ff:50: b6:4c:36:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xqpqNJ0Riu//KscHS8I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGQyMzU2OTNmNjg2N2M1YjM4MTNkYTFmMzZmZTEwN2Jk MWQ3ODIwHhcNMjUxMjIwMDgwMDU2WhcNMjUxMjIxMDgwMDU2WjAzMTEwLwYDVQQD EyhiMjdkNzIyMzQxZDliYTgzZjczNDEzZWFhYTMzM2UyNDRjMjU3NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ZNs6g6HUYLdXZ7R7UOIga+7lj6 JfN2SMKzqishjmzNiipeHnW0tY4NwjUdW1ETMALk5nprzvdNPWgoqVjLRRghhvcE DaAnMNFZ6Rk2xqukejqEc9yHVKtE/6GIURaAiYbW0HXUbQ0kedLurT3SFleqhyCV 9PbU0b29ow0AFY4HXZmG5HQrhQUET9bDjHeA83XdWhqprkswZRx8qJ//folgzWS1 xzO6273v/oqcjiOmFX8T3LSHpOkJhcZzZxtmEF3lOaDvFjHWWH3hYeknN6CciGxb rvrd2jVH4NN3G2FrDYinyLZEDL0TZLg0BWA42nk8dv2yju75Xa3TlgbZkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ9ciNB2bqD9zQT6qozPiRMJXWkMB8GA1UdIwQY MBaAFHaNI1aT9oZ8WzgT2h82/hB70deCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2Yt ZTM3NmI5MjQyZWE3LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2YtZTM3NmI5MjQyZWE3 LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzyiu32X lTy0sxU7hEmYtMlN1rNghxzMYiaHEXjcSTGu+HfiFM7G8HhC6qIr7Fs4/yn/z7Ye +Tem8YcXjG31dg4FVI79AyyR7geT9E6K0zG2z9Zyx2nS8MNJfE3YCo9lVHRJkHE2 hwRi8yKFeQecEFjbHvk/pfuf498N6hKp6lw/z0MA4Uh/ufAykcVtOrgxNbdEgj2N wxxy9wi1268kjXjyRyWTLWFwwnglayLZ6u8Tzeq2ZjvRWwGlKsxx+553ZzQs9Nuk LlFLs2tmg/z6U/6/aTG1Wekz/A5Aqwg0PEWTjA0TSlqEWEJX5jbuZzvNo8p+Ne/4 EatglP9Qtkw2gg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:45:23 2025 by rpki-client